Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,789All CVEsplus 19,114 rejected
- 481Last 24 hours2,892 in the last 7 days
- 16,905Last 30 days1,556 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 1 | 1 | 0 | 0 | 3 | 18 |
| 2025 | 0 | 0 | 4 | 0 | 0 | 4 | 15 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 11 |
| 2023 | 0 | 0 | 0 | 1 | 0 | 1 | 11 |
| 2022 | 0 | 0 | 3 | 7 | 0 | 10 | 10 |
| Title | ||
|---|---|---|
| CVE-2026-25784 | bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysopHallo Welt! GmbH · BlueSpice | Critical9.3 |
| CVE-2026-25716 | BlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking usersHallo Welt! GmbH · BlueSpice | High7.1 |
| CVE-2026-24732 | Improper permission checks in Extension:NSFileRepoHallo Welt! GmbH · BlueSpice | Medium6.6 |
| CVE-2025-58114 | Potential XSS in Extension:CognitiveProcessDesignerHallo Welt! GmbH · BlueSpice | Medium5.9 |
| CVE-2025-57880 | Potential XSS in Extension:BlueSpiceWhoIsOnlineHallo Welt! GmbH · BlueSpice | Medium5.9 |
| CVE-2025-48007 | Potential XSS in Extension:BlueSpiceAvatarsHallo Welt! GmbH · BlueSpice | Medium5.9 |
| CVE-2025-46703 | Potential XSS in Extension:AtMentionsHallo Welt! GmbH · BlueSpice | Medium5.9 |
| CVE-2023-42431 | Potential XSS on user preferences pageHallo Welt! GmbH · BlueSpice | Low2.1 |
| CVE-2022-42001 | Potential XSS in book navigationHallo Welt! GmbH · BlueSpice | Low3.3 |
| CVE-2022-42000 | Potential XSS in comment sectionHallo Welt! GmbH · BlueSpice | Low3.3 |
| CVE-2022-41814 | Potential XSS in history viewHallo Welt! GmbH · BlueSpice | Low3.3 |
| CVE-2022-41789 | Potential XSS on default page headerHallo Welt! GmbH · BlueSpice | Low3.3 |
| CVE-2022-41611 | Potential XSS on sidebar navigationHallo Welt! GmbH · BlueSpice | Low2.3 |
| CVE-2022-3958 | Potential XSS on personal menu navigationHallo Welt! GmbH · BlueSpice | Low3.3 |
| CVE-2022-3895 | Potential XSS in common user interface component libraryHallo Welt! GmbH · Common User Interface Component | Medium4.0 |
| CVE-2022-3893 | Potential XSS on custom menu navigationHallo Welt! GmbH · BlueSpice | Low2.3 |
| CVE-2022-2510 | Potential XSS on Special:SearchCenterHallo Welt! GmbH · BlueSpice | Medium4.3 |
| CVE-2022-2511 | Potential XSS in title URL parameterHallo Welt! GmbH · BlueSpice | Medium4.3 |